chaosrebel/pico-fido
1
0
Fork 0
mirror of https://github.com/polhenarejos/pico-fido.git synced 2026-07-21 21:10:33 +01:00
Code Issues Packages Projects Releases Wiki Activity

Commit Graph

  • ad6109c560 Redesign resident credential storage using containers main nightly-main nightly-development Pol Henarejos 2026-07-18 01:11:03 +02:00
  • 43cf570ac3 Add FIDO object authorization context with operation-scoped evidence Pol Henarejos 2026-07-17 22:49:30 +02:00
  • 16f9379e70 Adapt object crypto protection to the existing FIDO device key Pol Henarejos 2026-07-17 19:50:36 +02:00
  • 8d46606ed6 Improve generalization of ABI. plugin Pol Henarejos 2026-07-16 16:11:31 +02:00
  • 1fbfd554f5 Add tests for other curves. preview_sign Pol Henarejos 2026-07-13 22:00:49 +02:00
  • 0bb2ce2bbc Fix crash on error. Pol Henarejos 2026-07-13 21:59:50 +02:00
  • d8171adb2b Fix hash for other curves. Pol Henarejos 2026-07-13 21:50:41 +02:00
  • caba1ea1de Add support for preview signature v4. Pol Henarejos 2026-07-13 21:46:14 +02:00
  • e0c69de98c Add test for OTP Pol Henarejos 2026-07-13 21:45:30 +02:00
  • 847ab03c6d Add thirdPartyPayment tests. Pol Henarejos 2026-07-13 14:33:37 +02:00
  • 3acac02794 Add alwaysUv and complexityPolicy tests. Pol Henarejos 2026-07-13 14:33:23 +02:00
  • 290196f7ee Add hmac-secret-mc tests. Pol Henarejos 2026-07-13 14:33:00 +02:00
  • 2cc8adcab8 Add FIDO_2_3 test. Pol Henarejos 2026-07-13 14:32:51 +02:00
  • 70a6a18bb9 Upgrade python-fido2 to 2.2.1 Pol Henarejos 2026-07-13 14:32:32 +02:00
  • 91f020d751 Return thirdPartyPayment in make credential. Pol Henarejos 2026-07-13 14:18:07 +02:00
  • 96ffcaffc1 Fix config request below maxMsgSize. Pol Henarejos 2026-07-13 12:05:55 +02:00
  • d52183144c Fix time-of-check time-of-use filesystem race condition Pol Henarejos 2026-07-13 01:30:06 +02:00
  • 397660c75e Fix build-mode and disable trap caching. Pol Henarejos 2026-07-13 01:04:43 +02:00
  • dcb68ea918 Update checkout action Pol Henarejos 2026-07-13 00:55:37 +02:00
  • ca9e38ed1c Upgrade codeql to v4 Pol Henarejos 2026-07-13 00:47:12 +02:00
  • 17d11a0700 Fix emulation build. Pol Henarejos 2026-07-13 00:02:54 +02:00
  • bcc67a4da3 Blink 3 times when creating a credential or getting an assertion. Pol Henarejos 2026-07-12 23:58:56 +02:00
  • 332699ce80 Fix FORCE_BUTTON_WAIT check Pol Henarejos 2026-07-12 23:25:59 +02:00
  • 8c7c74c779 Fix sign comparison. Pol Henarejos 2026-07-12 23:25:38 +02:00
  • 1c9998a4e7 New resident credentials derive signing key, hmac-secret key, and largeBlobKey from the stable protocol 2.6 resident ID. Pol Henarejos 2026-07-12 22:12:02 +02:00
  • abd442990a Add security bounds. Pol Henarejos 2026-07-12 20:49:46 +02:00
  • 6fc171a04d Validate a present RP ID hash as 32 bytes and a resident credential ID as CRED_RESIDENT_LEN before use. Pol Henarejos 2026-07-12 20:49:39 +02:00
  • c5c756e7f5 Expiry is now checked before every CBOR command, not only while handling Client PIN. The observer now expires a token when either its total lifetime or its initial-use limit has elapsed and clears stale user-presence state. Pol Henarejos 2026-07-12 20:48:35 +02:00
  • ec43fd12ba Protocol 1 requires exactly 16 bytes; protocol 2 requires exactly 32 bytes. Unsupported protocols are rejected before verification. Pol Henarejos 2026-07-12 20:46:44 +02:00
  • efae9e4d5b Configuration/update commands require a complete configuration plus access code; HMAC and Yubico challenge paths require their respective minimum input lengths before copying or processing data. Pol Henarejos 2026-07-12 20:45:42 +02:00
  • af37a670ef Now requires an authenticated OATH session. Pol Henarejos 2026-07-12 20:44:55 +02:00
  • 80e1a55836 Configuration writes reject empty APDUs and require physical user presence before persisting device/PHY configuration. Pol Henarejos 2026-07-12 20:06:22 +02:00
  • 9e1bf2bcb7 AUT_ENABLE now requires that same exact encrypted-key length before decrypting or using it as a ChaChaPoly key. Pol Henarejos 2026-07-12 20:05:57 +02:00
  • 8ec4dd2388 Backup restore now requires physical user presence; MSE decrypt rejects under-16-byte inputs; unlock requires the expected 32-byte encrypted key plus 16-byte tag. Pol Henarejos 2026-07-12 20:05:48 +02:00
  • 779295a213 Rejects credential-management transport arrays beyond descriptor capacity. Pol Henarejos 2026-07-12 19:51:47 +02:00
  • 8485b45f8b Rejects allow-list and transport arrays beyond those same fixed capacities. Pol Henarejos 2026-07-12 19:51:37 +02:00
  • ebc68f7bb1 Rejects parameter/exclude-list entries above the 16-entry capacity and transport names above the descriptor's 8-entry capacity. Pol Henarejos 2026-07-12 19:51:28 +02:00
  • 2b4b5e2c13 Upgrade libs Pol Henarejos 2026-07-10 22:02:31 +02:00
  • bdeeb23c89 In HID, ensure the whole packet can be processed. Otherwise, wait for a completion. Pol Henarejos 2026-07-10 16:10:17 +02:00
  • c7ed94f1ae Add checks on OATH VERIFY. Pol Henarejos 2026-07-10 16:07:24 +02:00
  • ef26c5a2ac U2F authenticate now loads FIDO2 credential metadata after successful credential verification and check for credProtect flag. Pol Henarejos 2026-07-10 16:07:08 +02:00
  • 883b6c41a7 Use FORCE_WAIT_BUTTON to override button wait. Pol Henarejos 2026-07-10 13:12:02 +02:00
  • 1daa308067 Fix button on selection. Pol Henarejos 2026-07-09 22:42:03 +02:00
  • a5ece3943d Add support for UTF-8 pin. Pol Henarejos 2026-07-09 21:10:19 +02:00
  • 5b22b591f6 Add secp256k1 in metadata. Pol Henarejos 2026-07-09 17:17:42 +02:00
  • 4477fa8760 Add OATH decrement and check auth. Pol Henarejos 2026-07-05 12:22:06 +02:00
  • e4179204cf Fix additional slots check and access code for swap. Pol Henarejos 2026-07-05 01:27:32 +02:00
  • 7247bd3f6c Add check for max pin length. Pol Henarejos 2026-07-05 01:25:57 +02:00
  • d7f864d5ac Reset gna state when no get next is performed. Pol Henarejos 2026-07-05 01:25:38 +02:00
  • d2dd0f161a Fix hmac-secret-mc check. Pol Henarejos 2026-07-05 01:21:21 +02:00
  • 8e077ecb7d Fix credential list when all budget is full (256 creds). Pol Henarejos 2026-07-05 01:20:58 +02:00
  • eab3398da8 Fix validation on verify hotp. Pol Henarejos 2026-07-04 23:41:35 +02:00
  • fe5d57b7c2 Encrypt whole OTP slots. Pol Henarejos 2026-07-04 12:37:44 +02:00
  • f761d06388 Encrypt PIN access to oath. Pol Henarejos 2026-07-04 12:37:37 +02:00
  • 7730788061 Use constant time cmp for userId. Pol Henarejos 2026-07-04 12:27:00 +02:00
  • 9639e1d56c Moving pointer Pol Henarejos 2026-07-03 21:13:34 +02:00
  • 36edf8d3fd Merge branch 'main' into plugin Pol Henarejos 2026-06-30 23:36:56 +02:00
  • 636f593747 Add FORCE_BUTTON_WAIT option. Pol Henarejos 2026-06-30 23:35:36 +02:00
  • f33fc0c746 Add audit support. Pol Henarejos 2026-06-30 21:16:44 +02:00
  • 90cb675b43 Upgrade metadata to v8.0 Pol Henarejos 2026-06-29 01:01:14 +02:00
  • 796e71a0d4 Add test and production metadata. Pol Henarejos 2026-06-29 00:59:18 +02:00
  • 2baa534c7c Remove configURL. Pol Henarejos 2026-06-29 00:51:18 +02:00
  • bb2764bc75 Add test results. Pol Henarejos 2026-06-29 00:40:37 +02:00
  • f348bda1dc Add url fields. Pol Henarejos 2026-06-29 00:40:20 +02:00
  • e9b160a8ef ADd first version of the metadata. Pol Henarejos 2026-06-28 21:55:33 +02:00
  • 9d03885259 Add MAX_PIN_RETRIES definable in cmake. Pol Henarejos 2026-06-28 21:33:07 +02:00
  • 956798bba6 Add support for uvm extension. Pol Henarejos 2026-06-28 14:44:33 +02:00
  • 6447564959 Add pinComplexityPolicy support. Pol Henarejos 2026-06-28 14:28:12 +02:00
  • f29d8500b4 Fix get_info for removed unused command ids. Pol Henarejos 2026-06-28 11:50:04 +02:00
  • 86e3d1410a Announce makeCredUvNotRqd if auv opt is false. Pol Henarejos 2026-06-28 02:34:45 +02:00
  • 2c1e531135 Remove unused vendor command ids. Pol Henarejos 2026-06-28 01:56:59 +02:00
  • 15f2b846f5 Remove vendor command for toggling auv, since it is already in the spec. Pol Henarejos 2026-06-28 01:54:07 +02:00
  • f88784569c Add support for encIdentifier and encCredStoreState. Pol Henarejos 2026-06-28 01:42:04 +02:00
  • e4f1a26c15 Fix files ACL. Pol Henarejos 2026-06-28 00:26:02 +02:00
  • 596ca90241 Fix pin complexity file. Pol Henarejos 2026-06-28 00:24:19 +02:00
  • 0524466eb7 Announce maxPINLength Pol Henarejos 2026-06-27 23:28:49 +02:00
  • 13031be87f Announce PCMR. Pol Henarejos 2026-06-27 23:24:11 +02:00
  • f58d56706c Fix vendor command ids. Pol Henarejos 2026-06-27 23:16:02 +02:00
  • 68ed1f9e72 Fix button on selection. Pol Henarejos 2026-06-26 18:08:38 +02:00
  • 59c0c661e5 Fix maxRpIds for minpin length. Pol Henarejos 2026-06-26 16:57:31 +02:00
  • 7390aeed2e Add config AUV, config mcUvNotRqd and config noRk to get_info. Pol Henarejos 2026-06-26 16:50:43 +02:00
  • 8fd5dfa3d8 Fix config getinfo ifdef. Pol Henarejos 2026-06-26 16:48:38 +02:00
  • c329823b4f Add support for makeCredUVNotRequired. Pol Henarejos 2026-06-26 13:31:19 +02:00
  • a318f73808 Add alwaysUv config option. Pol Henarejos 2026-06-26 11:07:51 +02:00
  • a6eb149bd1 Add support for only-non-resident credentials. Pol Henarejos 2026-06-26 11:03:51 +02:00
  • f0e6ca7a9f Add getinfo config options. Pol Henarejos 2026-06-26 08:14:28 +02:00
  • 580c26f73d Fix PIN P-2, F-1, F-5. Pol Henarejos 2026-06-23 17:00:39 +02:00
  • a759b76e4a Fix F-3 for hmacSecretMC Pol Henarejos 2026-06-23 12:46:46 +02:00
  • 3d8183d15e Fix EA P-2, F-2, F-3. Pol Henarejos 2026-06-23 11:58:31 +02:00
  • 8dd1a6fb40 Return only id for restrictive assertions. Pol Henarejos 2026-06-23 10:11:19 +02:00
  • 4ae2a0492f Revert "Fix P-10" Pol Henarejos 2026-06-22 21:35:48 +02:00
  • 854f5a2bdb When a device is reset, all previous non-resident credentials shall be invalidated, regardless silent or active assertions. Pol Henarejos 2026-06-22 21:19:33 +02:00
  • 465ded39bd Fix F-7. Pol Henarejos 2026-06-22 20:01:14 +02:00
  • 8e24c97230 Fix P-10 Pol Henarejos 2026-06-22 19:28:26 +02:00
  • 4f6c9923c0 Add FIDO 2.3 announcement. Pol Henarejos 2026-06-22 19:27:26 +02:00
  • 654b6c9bdc Add more conformance tests. Pol Henarejos 2026-06-22 14:29:43 +02:00
  • 4f727645f5 Fix credential management update. Pol Henarejos 2026-06-22 14:27:26 +02:00
  • f30fa0ad80 Fix largeBlobs return errors. Pol Henarejos 2026-06-22 14:13:55 +02:00
  • 26f41ceff0 Do not check up presence in getinfo tests. Pol Henarejos 2026-06-22 13:49:11 +02:00
  • 0b41db259c Add and check MAX_RPIDS for minpin set. Pol Henarejos 2026-06-22 13:27:15 +02:00